Website Privacy Policy

Introduction

This Privacy Policy ("Policy") explains how Reportsentinel ("I", "we", "us", or "our") collects, uses, shares, and protects personal data obtained through our websites, applications, and related services. It is designed to comply with the Digital Personal Data Protection Act, 2023 ("DPDP Act"), and other applicable laws.

By accessing our website or using our services, you consent to the practices described in this Policy. Updates to this Policy will be communicated through our website or other appropriate channels.

Scope of the Policy

This Policy applies to:

• Personal data collected through websites, applications, and online platforms.
• Data provided by customers, employees, vendors, and business partners.
• Information gathered during recruitment or operational processes.
• Automatically collected data via digital platforms.

Definitions

Personal Data: Information that identifies or can identify an individual, such as name, contact details, and online identifiers.

Sensitive Personal Data: Information such as financial data, biometric data, health information, or any other data classified as sensitive under applicable laws.

Collection of Personal Data

4.1 Direct Collection

Personal data is collected directly from individuals in the following situations:

• Contractual engagements or use of services (e.g., names, addresses, payment details).
• Communications through customer service channels.

4.2 Business and Professional Contacts

Limited data such as names, job titles, and contact details may be collected from business partners and vendors.

4.3 Recruitment and Careers

Applicants may provide educational and professional records, identification documents, and references for recruitment purposes.

Purpose and Use of Personal Data

The Company processes personal data for the following purposes:

• Fulfilling contractual obligations.
• Complying with legal and regulatory requirements.
• Improving website functionality and personalizing user experiences.
• Marketing and promotional communications with consent.
• Recruitment, employment, and operational management.
• Conducting analytics and research.

Provision of Services

Specific Purposes and Data Elements:

Sharing of Personal Data

6.1 Regulatory and Legal Compliance

Personal data may be disclosed to regulatory authorities and law enforcement agencies as required by law.

6.2 Third-Party Service Providers

We share data with trusted service providers for IT support, payment processing, and marketing services. These third-party service providers are contractually bound to safeguard and protect personal data, just as the organization (data fiduciary). Contracts ensure that data is used only for intended purposes.

6.3 Business Transfers

Personal data may be transferred during mergers, acquisitions, or asset sales.

Data Security

We implement appropriate measures to protect personal data. All communications and data exchanges are conducted through our official email channels, and we rely on the security standards maintained by our email service provider.

These measures include:

• Encryption and security controls as provided by the email service provider.
• Restricted access to personal data based on role and necessity.
• Regular monitoring and internal reviews to ensure data protection.
• Procedures to address potential data security incidents promptly.

We do not recommend sharing any sensitive personal information through social media platforms, as such channels may not provide adequate security. Users are advised to use only official communication channels for sharing personal data.

Retention of Personal Data

Personal data is retained only as long as necessary to fulfill its purpose or comply with legal obligations. After the retention period, data is securely deleted or anonymized. However, if required by a specific law or any court order related to data retention, personal data may be retained even after the withdrawal of consent for the period specified by such law or court order, until the final remedy of appeal lapses.

Children’s Privacy

Our services are not directed at individuals under 18. If you believe we have collected data from a minor, please contact us immediately.

Your Rights

Under the DPDP Act, you have the following rights:

• Access: Request a copy of your personal data.
• Rectification: Correct inaccuracies.
• Erasure: Request deletion of data no longer required.
• Restriction: Limit the processing of your data.
• Withdrawal of Consent: Revoke consent at any time.

To exercise these rights, contact Privacy@reportsentinel.in. Requests will be processed within 90 days or as required by law.

Changes to the Privacy Policy

This Policy may be updated periodically to reflect legal, regulatory, or operational changes. Updates will be communicated via our website.

Contact Information

For questions or concerns, please contact: Privacy@reportsentinel.in